Before the Office 365 account administrator or other accounts can create a backup set, the administrator has to grant permission to the account(s) which are going to create backup set. The account must be a member of the following security groups:

• Discovery Management
• Public Folder Management

Follow the steps below to grant permission to user account.

i. Open https://outlook.office365.com/ecp

ii Login to the Exchange admin center as an account administrator.

iii. Select the permissions menu on the left, then double click on Discovery Management or Public Folder Management on the right.

iv. You can now add users to this group. Click the + icon under the Members section.

v. Look for the username(s) of the account that you would like to add permission for, then click add > OK to add the corresponding user(s) to the permission group.

v. Click Save to confirm and exit the setting.

This permission allows users added under the Members section of the Discovery Management group (refer to the previous section for setup) to back up and/or restore mailbox item(s) not only for their own account, but also the accounts of other users in the same Members section. To grant permission for this feature, you have to add the Application Impersonation role by following the steps below.

1. Open https://outlook.office365.com/ecp

2. Login to the Exchange admin center as an account administrator.

3. Select the permissions menu on the left, then double click on Discovery Management on the right.

4. Click the + icon under the Role section.

5. Select the ApplicationImpersonation role, then click the add button. Click OK afterward.

6. Click Save to confirm and exit the setting.

This permission allows users to backup public folders of Exchange Online.